← All credits
meifukun
23 vulnerability records and advisories credit this contributor.
CVE-2026-64944
Apache Answer: Stored XSS via unsanitized HTML in imported question content
CVE-2026-64945
Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions
CVE-2026-64943
Apache Answer: API keys logged in plaintext during authentication
CVE-2026-109625
Frappe ERPNext before 15.121.3 Missing Authorization Exposes Financial Data
CVE-2026-109627
Frappe ERPNext before 15.120.0 Missing Authorization Exposes Financial Data
CVE-2026-109616
Frappe ERPNext before 15.121.3 Missing Authorization Allows Unauthorized Data Modification
CVE-2026-66087
Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint
CVE-2026-66082
Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow）
CVE-2026-71895
Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials
CVE-2026-66083
Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource